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DCID No. 1/11 
Attachment 2 


DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO. 1/11 
(Attachment 2) 


COMPUTER SECURITY 


The Security Committee with respect to computer security shall: 


1. Review, formulate and recommend to the Director of Central Intelligence 
policies, standards and procedures to protect intelligence data stored or processed by 
computer, 


2. Advise and assist the Director of Central Intelligence, Intelligence Community 
organizations, DCI committees and other intelligence users with respect to all 
computer security issues; and to resolve conflicts that may arise in connection 
therewith. 


3. Formulate and recommend to the Director of Central Intelligence resource 
programming objectives for Intelligence Community organizations in the field of 
computer security in consideration of current and foreseen vulnerabilities and threats 
and with regard for the effective and efficient use of resources; to foster and to monitor 
an aggressive program of computer security research and development in the 
Intelligence Community in order to avoid unwarranted duplication and to assure the 
pursuit of an effective effort at resolving technical problems associated with the 
protection of computer operations. 


4. Coordinate all aspects of Intelligence Community efforts in defense against 
hostile penetration of Community computer systems and as feasible to support other 
governmental efforts aimed at improving computer security technology; to foster a 
coordinated program of Intelligence Community computer security training and 
indoctrination. 


5. Facilitate within the Intelligence Community the exchange of information 
relating to computer security threats, vulnerabilities and countermeasures by 
providing a focal point for: 


a. The evaluation of foreign intentions and capabilities to exploit Community 
computer operations; 


b. Central notification of hostile exploitation attempts; 


c. The preparation of damage assessments of incidents of foreign exploitation 
of intelligence computer operations; and 


d. The development of policy recommendations to the Director of Central 
Intelligence on the release of computer security information to foreign 
governments and international organizations. 


6, Review, formulate and recommend minimum computer security standards, 
procedures and criteria as guidance for system design, evaluation and certification of 
acceptable levels of security for computer systems. 
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DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO. 1/11 
(Attachment 3) 


COMPARTMENTATION ' 


The functions of the Security Committee as they relate to compartmentation 
controls are:? 


1. To develop and recommend to the Director of Central Intelligence, with the 
advice of the National Foreign Intelligence Board, technical guidance for the 
establishment, maintenance and improvement of coordinated compartmentation 
systems which will: 


a. Provide special protection to sensitive intelligence, intelligence information 
and intelligence sources and methods under the authority of Section 9 of 
Executive Order 11652. 


b. Ensure the establishment and disestablishment of compartmentation of 
intelligence and intelligence information on the instructions of the Director of 
Central Intelligence. 


c. Ensure coherent control by the Director of Central Intelligence of the 

processes for access approvals to compartmented intelligence and intelligence 

ed information and of the processes for dissemination, sanitization or release of such 
intelligence information. 


d. Ensure the establishment and promulgation of appropriate criteria for 
security and need-to-know access approvals. 


2, To formulate, coordinate, maintain and promulgate technical guidance for use 
in the administration of compartmentation controls at all echelon 


STAT as 


a. Access approval criteria and employment in hazardous duty areas 


b. Physical security 
c. Document identification, handling, accountability and destruction 


d. Automatic data processing and associated materials. 


1'The term “compartmentation”’ as used in this directive refers to the system whereby special Intelligence 
Community controls indicating restricted handling within collection programs and their end products are 
applied to certain types of intelligence information and material. The term does not include Restricted Data 
as defined in Section IJ, Atomic Energy Act of 1954, as amended. 
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3. To furnish technical guidance and assistance 
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in connection wit 
downgrading, declassification and decontro responsibilities, 


4. To review and survey, when appropriate, with the cooperation and assistance of 
the National Foreign Intelligence Board principal concerned, the security standards, 
practices and procedures employed by Intelligence Community organizations and 

25X1 [SSC_=sin relation to approved compartmentation policies, procedures and 
controls; and to make recommendations for practical improvements to the National 
Foreign Intelligence Board principals concerned through the Director of Central 
Intelligence. 
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6. To recommend security policies, in coordination with apprgpriate Director o 
Central Intelligence committees, governing the release or disclosure of com artmented 
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